Activate the verification of the certificate validity by enabling vSphere Replication to accept only SSL certificates signed by a trusted Certificate Authority.

When you enable vSphere Replication to accept only SSL certificates signed by a trusted Certificate Authority, vSphere Replication refuses to communicate with a server with an invalid certificate. You cannot use a self-signed certificate if you enable vSphere Replication to accept only SSL certificates signed by a trusted Certificate Authority.

Note: If you reconfigure vSphere Replication through the VRMS Appliance Management Interface after you activate the verification of certificate validity, the verification gets disabled and you must activate it again.

Procedure

  1. Establish an SSH connection to the vSphere Replication Appliance.
  2. Run the following command: /opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-trust-mode=0.
  3. Restart the HMS Service.